diff --git a/iptables/templates/iptables-rules.v4.j2 b/iptables/templates/iptables-rules.v4.j2 index 9743236d..20abbb01 100644 --- a/iptables/templates/iptables-rules.v4.j2 +++ b/iptables/templates/iptables-rules.v4.j2 @@ -259,6 +259,14 @@ {% endfor %} {% endif %} {% endif %} +{% if iptables.any_rules is defined and iptables.any_rules %} +# ANY rules +{% for any_rule in iptables.any %} +{% for ip in any_rule.allowed_hosts %} +-A INPUT -s {{ ip }} -j ACCEPT +{% endfor %} +{% endfor %} +{% endif %} {% if keepalived_enabled is defined and keepalived_enabled %} -A INPUT -p vrrp -d {{ keepalived_mcast_addr }} -j ACCEPT -A OUTPUT -p vrrp -d {{ keepalived_mcast_addr }} -j ACCEPT